db494be972
ELNBuildSync: enable redeployment
...
Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>
Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>
rh-pre-commit.version: 2.4.0
rh-pre-commit.check-secrets: ENABLED
2026-07-07 14:13:02 -04:00
d880671e4f
ELNBuildSync: fix client_id on staging
...
Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>
rh-pre-commit.version: 2.4.0
rh-pre-commit.check-secrets: ENABLED
2026-07-07 14:09:22 -04:00
cd7f6c2efc
ELNBuildSync: Use the right namespace in the service object
...
Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>
rh-pre-commit.version: 2.4.0
rh-pre-commit.check-secrets: ENABLED
2026-07-07 13:32:04 -04:00
eee169398c
ELNBuildSync: Actually apply the service object
...
Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>
rh-pre-commit.version: 2.4.0
rh-pre-commit.check-secrets: ENABLED
2026-07-07 13:25:37 -04:00
James Antill
96b1531c50
Revert "elnbuildsync: limit to staging for now"
...
This reverts commit 7ef75bd174
2026-07-07 12:55:32 -04:00
0aa20b9436
ELNBuildSync: Prepare prod deployment
...
Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>
rh-pre-commit.version: 2.4.0
rh-pre-commit.check-secrets: ENABLED
2026-07-07 11:07:32 -04:00
Jiri Podivin
6f377c8d87
Check for undefined deploy script
...
Signed-off-by: Jiri Podivin <jpodivin@redhat.com>
2026-07-07 12:37:45 +02:00
dee5b453f1
Zabbix: get the tag name/value pair the right way around
...
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-07-07 10:45:17 +01:00
ea32c85fa7
Zabbix: 13450 - filter COPR notifications better
...
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-07-07 10:40:59 +01:00
83b0f60d6a
[postfix] Change the relayhost for sign machines
...
Today the bastion relayhost didn't work for sign-bridge. So we changed
it to bastion01.rdu3.fedoraproject.org. This worked, so let's reflect
that change in ansible as well.
Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2026-07-07 11:01:08 +02:00
Jiri Podivin
51a458f26b
User certbot role for Log Detective
...
Signed-off-by: Jiri Podivin <jpodivin@redhat.com>
2026-07-07 08:45:21 +00:00
Jiri Podivin
f4c497e764
Create a separate role for certbot driven certificate renewal
...
Signed-off-by: Jiri Podivin <jpodivin@redhat.com>
2026-07-07 08:45:21 +00:00
Jiri Podivin
cd29c1260e
Attempt shut down Log Detective service before restarting it
...
Signed-off-by: Jiri Podivin <jpodivin@redhat.com>
2026-07-07 08:39:45 +00:00
Lenka Segura
6e63ce738b
forge: Add mobility runner to production
...
Signed-off-by: Lenka Segura <lsegura@redhat.com>
2026-07-07 10:26:01 +02:00
Lenka Segura
5686cf77b7
forge: add regular runner for go org
...
Signed-off-by: Lenka Segura <lsegura@redhat.com>
2026-07-07 07:30:40 +00:00
701d7e1867
fix(koji-http-toggle): delete each nft drop rule handle separately
...
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
2026-07-07 12:45:36 +05:30
f059b1f9d2
fix(koji-http-toggle): resolve proxy IPs via shell so awk pipe works
...
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
2026-07-07 12:32:36 +05:30
d9e7279830
Add Ansible playbook to toggle Koji HTTP access with nftables
...
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
2026-07-07 12:14:25 +05:30
f2239cb238
feat(forgejo): oauth-proxy delegates /metrics endpoint to be accesible through token
...
Signed-off-by: Anton Medvedev <amedvede@redhat.com>
2026-07-06 15:59:51 +02:00
Lenka Segura
53bede04b2
forge: add staging docs and production relend testing-farm runners
...
Signed-off-by: Lenka Segura <lsegura@redhat.com>
2026-07-06 15:33:27 +02:00
df71a59847
forgejo: fixed bug with UUID in zabbix template
...
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2026-07-06 13:40:36 +01:00
539176cb09
Collectd: disable collectd pod in FMN app, log01 is no longer listening
...
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-07-06 11:55:19 +01:00
Jakub Kadlcik
e5bb2ff606
copr: use the latest version of the expect package
...
Fix https://github.com/fedora-copr/copr/issues/4361
2026-07-06 10:49:20 +02:00
d13496b221
Collectd: stop the collectd service everywhere, prior to removal
...
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-07-03 13:09:19 +01:00
42ac8c53d5
forgejo: wip zabbix template to monitor forge metrics endpoint
...
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2026-07-03 12:03:17 +01:00
9ea0108e6d
feat(forgejo): added SA,R,RB,S that zabbix will you to bypass oauth-proxy for accessing metrics endpoint
...
Signed-off-by: Anton Medvedev <amedvede@redhat.com>
2026-07-03 12:09:43 +02:00
9b65ab416b
Nagios: remove nagios_server role
...
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-07-02 13:39:18 +01:00
bf0cafb5b4
Nagios: fix removal task ordeering
...
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-07-02 13:32:09 +01:00
93f5b63c0c
Nagios: remove the Nagios server components
...
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-07-02 12:29:06 +00:00
Lenka Segura
2dbf6d5978
forge: Add a handful of runners
...
Signed-off-by: Lenka Segura <lsegura@redhat.com>
2026-07-02 09:08:55 +02:00
83270e8b3b
ipa-free-ids: pass monitoring keytab to the cron jobs
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-07-01 14:53:49 -07:00
b74bb8e1a3
communishift: add pvc handling and allow 3 for happinesspackets
...
Per infra/tickets#13437
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-07-01 14:40:17 -07:00
b6097f96c2
download: drop centos-stream content
...
Turns out we were syncing this, but never actually had the categories
set in mirrormanager, so we never got any traffic for it.
These download servers are really close to full, so lets just remove
this for now and see if that gives us some space.
We probibly will need to stop carrying archive or something on these
sooner or later though.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-07-01 14:13:10 -07:00
d2c6b0c7dd
websites: bypass anubis for POST on forge.fedoraproject.org too
...
We have been seeing some 502's on forge also, that might be the same
thing we were seeing with src and koji, so lets try and bypass POSTs
here too.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-07-01 13:03:26 -07:00
56e52aa71c
bodhi: adjust config in staging to allow src.stg builds
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-07-01 12:27:38 -07:00
b27e90e124
ELNBuildSync: Add hostname entries
...
Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>
rh-pre-commit.version: 2.4.0
rh-pre-commit.check-secrets: ENABLED
2026-07-01 14:34:56 -04:00
20687f05ee
ELNBuildSync: Wait for the build to complete
...
The playbook can be run with --tags all,build and it will perform the
ImageStream build and then proceed to deployment.
Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>
rh-pre-commit.version: 2.4.0
rh-pre-commit.check-secrets: ENABLED
2026-07-01 13:57:48 -04:00
92c757a52e
Add OCP_BUILD_WAIT option to openshift/start-build role
...
Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>
rh-pre-commit.version: 2.4.0
rh-pre-commit.check-secrets: ENABLED
2026-07-01 13:56:48 -04:00
609976d3c2
Revert "ELNBuildSync: Wait for build to complete"
...
This reverts commit baceaabf97
2026-07-01 13:54:34 -04:00
baceaabf97
ELNBuildSync: Wait for build to complete
...
Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>
rh-pre-commit.version: 2.4.0
rh-pre-commit.check-secrets: ENABLED
2026-07-01 13:34:47 -04:00
50c4278af6
ELNBuildSync: pull in 1.3.2
...
Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>
rh-pre-commit.version: 2.4.0
rh-pre-commit.check-secrets: ENABLED
2026-07-01 13:22:38 -04:00
James Antill
2f018f36e2
sync-http-logs: Add some missing hosts, and add some comments.
...
Signed-off-by: James Antill <james@and.org>
2026-07-01 13:17:58 -04:00
0b1267eb9b
Nagios: remove nagios_client role, and remove it from playbooks
...
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-07-01 17:31:32 +01:00
449ddd529b
Zabbix: Add koji check_lock script
...
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-07-01 17:31:18 +01:00
c4a96be6cc
Zabbix: set owner of centos-monitoring rabbit scripts/units/timers correctly
...
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-07-01 16:41:06 +01:00
2818ab897e
Nagios: change ownership of centos sender script
...
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-07-01 16:06:48 +01:00
6eac650a10
Nagios: remove nrpe from a bunch of smaller things
...
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-07-01 14:22:40 +01:00
ea960ee1a7
Nagis: remove nrpe config from rabbitmq_cluster
...
This actually restores some code I deleted in March, because it's needed
for the CentOS sender. It now places that config in /etc/zabbix since
/etc/nrpe.d is going to be removed.
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-07-01 14:22:40 +01:00
fbf73ff1f9
Nagios: remove nrpe from the firewall config
...
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-07-01 13:35:34 +01:00
bd60dab0fb
Nagios: remove nrpe from fedmsg
...
The user is already gone in the nagios_client commit, but this alters
the sockets to be group-owned by Zabbix instead of nrpe
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-07-01 13:35:34 +01:00
